Mac OS X
by Apple Inc.
CVEs (3,257)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2005-1728 | 0.00 | — | 0.00 | Jun 8, 2005 | MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain the credentials. | |||
| CVE-2005-1723 | 0.00 | — | 0.01 | Jun 8, 2005 | LaunchServices in Apple Mac OS X 10.4.x up to 10.4.1 does not properly mark file extensions and MIME types as unsafe if an Apple Uniform Type Identifier (UTI) is not created when the type is added to the database of unsafe types, which could allow attackers to bypass intended… | |||
| CVE-2005-1472 | 0.00 | — | 0.00 | May 19, 2005 | Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories. | |||
| CVE-2005-1260 | 0.00 | — | 0.06 | May 19, 2005 | bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb"). | |||
| CVE-2005-0974 | 0.00 | — | 0.00 | May 12, 2005 | Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments. | |||
| CVE-2005-0973 | 0.00 | — | 0.00 | May 12, 2005 | Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments. | |||
| CVE-2005-0969 | 0.00 | — | 0.00 | May 12, 2005 | Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters. | |||
| CVE-2005-0972 | 0.00 | — | 0.00 | May 12, 2005 | Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters. | |||
| CVE-2005-0971 | 0.00 | — | 0.00 | May 12, 2005 | Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments. | |||
| CVE-2005-1342 | 0.00 | — | 0.05 | May 4, 2005 | The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands. | |||
| CVE-2005-1330 | 0.00 | — | 0.00 | May 4, 2005 | AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception. | |||
| CVE-2005-1332 | 0.00 | — | 0.02 | May 4, 2005 | Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the user being notified, and local users to access files via the default directory. | |||
| CVE-2005-1336 | 0.00 | — | 0.01 | May 4, 2005 | Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable. | |||
| CVE-2005-1338 | 0.00 | — | 0.00 | May 4, 2005 | Mac OS X 10.3.9, when using an LDAP server that does not use ldap_extended_operation, may store initial LDAP passwords for new accounts in plaintext. | |||
| CVE-2005-1341 | 0.00 | — | 0.03 | May 4, 2005 | Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences. | |||
| CVE-2005-1339 | 0.00 | — | 0.01 | May 4, 2005 | lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name. | |||
| CVE-2005-1340 | 0.00 | — | 0.01 | May 4, 2005 | The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy. | |||
| CVE-2005-1331 | 0.00 | — | 0.02 | May 4, 2005 | The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain… | |||
| CVE-2005-1335 | 0.00 | — | 0.01 | May 4, 2005 | Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external helper programs in an insecure manner." | |||
| CVE-2005-1337 | 0.00 | — | 0.01 | May 4, 2005 | Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI. |
- CVE-2005-1728Jun 8, 2005risk 0.00cvss —epss 0.00
MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain the credentials.
- CVE-2005-1723Jun 8, 2005risk 0.00cvss —epss 0.01
LaunchServices in Apple Mac OS X 10.4.x up to 10.4.1 does not properly mark file extensions and MIME types as unsafe if an Apple Uniform Type Identifier (UTI) is not created when the type is added to the database of unsafe types, which could allow attackers to bypass intended…
- CVE-2005-1472May 19, 2005risk 0.00cvss —epss 0.00
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories.
- CVE-2005-1260May 19, 2005risk 0.00cvss —epss 0.06
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").
- CVE-2005-0974May 12, 2005risk 0.00cvss —epss 0.00
Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.
- CVE-2005-0973May 12, 2005risk 0.00cvss —epss 0.00
Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments.
- CVE-2005-0969May 12, 2005risk 0.00cvss —epss 0.00
Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters.
- CVE-2005-0972May 12, 2005risk 0.00cvss —epss 0.00
Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters.
- CVE-2005-0971May 12, 2005risk 0.00cvss —epss 0.00
Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.
- CVE-2005-1342May 4, 2005risk 0.00cvss —epss 0.05
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
- CVE-2005-1330May 4, 2005risk 0.00cvss —epss 0.00
AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception.
- CVE-2005-1332May 4, 2005risk 0.00cvss —epss 0.02
Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the user being notified, and local users to access files via the default directory.
- CVE-2005-1336May 4, 2005risk 0.00cvss —epss 0.01
Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable.
- CVE-2005-1338May 4, 2005risk 0.00cvss —epss 0.00
Mac OS X 10.3.9, when using an LDAP server that does not use ldap_extended_operation, may store initial LDAP passwords for new accounts in plaintext.
- CVE-2005-1341May 4, 2005risk 0.00cvss —epss 0.03
Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences.
- CVE-2005-1339May 4, 2005risk 0.00cvss —epss 0.01
lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name.
- CVE-2005-1340May 4, 2005risk 0.00cvss —epss 0.01
The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy.
- CVE-2005-1331May 4, 2005risk 0.00cvss —epss 0.02
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain…
- CVE-2005-1335May 4, 2005risk 0.00cvss —epss 0.01
Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external helper programs in an insecure manner."
- CVE-2005-1337May 4, 2005risk 0.00cvss —epss 0.01
Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI.
Page 158 of 163